[N0N] - Ransomware Victim: Company #74 - https://www.redpacketsecurity.com/n0n-ransomware-victim-company-74/
RedPacket Security
[N0N] - Ransomware Victim: Company #74 - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
CVE Alert: CVE-2026-111280 - davenardella - snap7 - https://www.redpacketsecurity.com/cve-alert-cve-2026-111280-davenardella-snap7/
RedPacket Security
CVE Alert: CVE-2026-111280 - davenardella - snap7 - RedPacket Security
snap7 through 1.4.3 contains an out-of-bounds write vulnerability in TSnap7MicroClient::opReadArea() that allows malicious S7 peers to overflow client buffers
CVE Alert: CVE-2026-111277 - nivocart - nivocart - https://www.redpacketsecurity.com/cve-alert-cve-2026-111277-nivocart-nivocart/
RedPacket Security
CVE Alert: CVE-2026-111277 - nivocart - nivocart - RedPacket Security
NivoCart through 2.5.1 contains a missing authorization vulnerability in the download() action of account/order that allows unauthenticated attackers to
CVE Alert: CVE-2026-111282 - driftregion - iso14229 - https://www.redpacketsecurity.com/cve-alert-cve-2026-111282-driftregion-iso14229/
RedPacket Security
CVE Alert: CVE-2026-111282 - driftregion - iso14229 - RedPacket Security
Driftregion iso14229 before 0.10.1 contains an integer wraparound in Handle_0x38_RequestFileTransfer that lets unauthenticated attackers bypass the file path
CVE Alert: CVE-2026-111279 - dragonflydb - dragonfly - https://www.redpacketsecurity.com/cve-alert-cve-2026-111279-dragonflydb-dragonfly/
RedPacket Security
CVE Alert: CVE-2026-111279 - dragonflydb - dragonfly - RedPacket Security
Dragonfly through 2.0.2 contains an unbounded memory allocation vulnerability that allows unauthenticated clients to exhaust memory by passing a negative
CVE Alert: CVE-2026-111312 - OpenHealthForAll - OpenHealth - https://www.redpacketsecurity.com/cve-alert-cve-2026-111312-openhealthforall-openhealth/
RedPacket Security
CVE Alert: CVE-2026-111312 - OpenHealthForAll - OpenHealth - RedPacket Security
OpenHealth through 0.2.0 contains a missing authentication and authorization vulnerability in the /api/health-data/ GET, PATCH and DELETE handlers that query
CVE Alert: CVE-2026-111356 - magicblack - MacCMS - https://www.redpacketsecurity.com/cve-alert-cve-2026-111356-magicblack-maccms/
RedPacket Security
CVE Alert: CVE-2026-111356 - magicblack - MacCMS - RedPacket Security
MacCMS v10 through 2026.1000.4056 does not limit attempts on the six-digit password recovery code, allowing unauthenticated attackers to take over member
CVE Alert: CVE-2026-111359 - crmeb - CRMEB - https://www.redpacketsecurity.com/cve-alert-cve-2026-111359-crmeb-crmeb/
RedPacket Security
CVE Alert: CVE-2026-111359 - crmeb - CRMEB - RedPacket Security
CRMEB 5.6.1 through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated storefront users to read and claim other users'
CVE Alert: CVE-2026-111352 - ThinkCMF - ThinkCMF - https://www.redpacketsecurity.com/cve-alert-cve-2026-111352-thinkcmf-thinkcmf/
RedPacket Security
CVE Alert: CVE-2026-111352 - ThinkCMF - ThinkCMF - RedPacket Security
ThinkCMF through 8.0.1 contains an incorrect authorization vulnerability in RestAdminBaseController that allows restricted backend administrators to call
CVE Alert: CVE-2026-111366 - cool-team-official - cool-admin-midway - https://www.redpacketsecurity.com/cve-alert-cve-2026-111366-cool-team-official-cool-admin-midway/
RedPacket Security
CVE Alert: CVE-2026-111366 - cool-team-official - cool-admin-midway - RedPacket Security
cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows department-limited admins to manage users outside their departments
CVE Alert: CVE-2026-111369 - classroomio - ClassroomIO - https://www.redpacketsecurity.com/cve-alert-cve-2026-111369-classroomio-classroomio/
RedPacket Security
CVE Alert: CVE-2026-111369 - classroomio - ClassroomIO - RedPacket Security
ClassroomIO through 1.0.0 contains an incorrect authorization vulnerability in the PUT and DELETE /:lessonId lesson routes that allows any course member,
CVE Alert: CVE-2026-75941 - Lenovo - Legion Zone Application - https://www.redpacketsecurity.com/cve-alert-cve-2026-75941-lenovo-legion-zone-application/
RedPacket Security
CVE Alert: CVE-2026-75941 - Lenovo - Legion Zone Application - RedPacket Security
A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusively in the Chinese market, that could allow an attacker on
CVE Alert: CVE-2026-111210 - n/a - bitcoinj - https://www.redpacketsecurity.com/cve-alert-cve-2026-111210-n-a-bitcoinj/
RedPacket Security
CVE Alert: CVE-2026-111210 - n/a - bitcoinj - RedPacket Security
A vulnerability was determined in bitcoinj up to 0.17. Affected is the function url.openConnection of the file PaymentSession.java of the component Payment
Active Exploitation of Vulnerability in Palo Alto Networks Products - https://www.redpacketsecurity.com/csa-gov-sg-active-exploitation-of-vulnerability-in-palo-alto-networks-products-16-10-2026/
RedPacket Security
Active Exploitation of Vulnerability in Palo Alto Networks Products - RedPacket Security
16 October 2026
[QILIN] - Ransomware Victim: Via Credit Union - https://www.redpacketsecurity.com/qilin-ransomware-victim-via-credit-union/
RedPacket Security
[QILIN] - Ransomware Victim: Via Credit Union - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[THEGENTLEMEN] - Ransomware Victim: Shared Medical Technology - https://www.redpacketsecurity.com/thegentlemen-ransomware-victim-shared-medical-technology/
RedPacket Security
[THEGENTLEMEN] - Ransomware Victim: Shared Medical Technology - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[THE SEVEN DEADLY SINS] - Ransomware Victim: Harness Inc[.] - https://www.redpacketsecurity.com/the-seven-deadly-sins-ransomware-victim-harness-inc/
RedPacket Security
[THE SEVEN DEADLY SINS] - Ransomware Victim: Harness Inc[.] - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[THEGENTLEMEN] - Ransomware Victim: Newport Beach Dentistry - https://www.redpacketsecurity.com/thegentlemen-ransomware-victim-newport-beach-dentistry/
RedPacket Security
[THEGENTLEMEN] - Ransomware Victim: Newport Beach Dentistry - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[THEGENTLEMEN] - Ransomware Victim: SONGWOOI - https://www.redpacketsecurity.com/thegentlemen-ransomware-victim-songwooi/
RedPacket Security
[THEGENTLEMEN] - Ransomware Victim: SONGWOOI - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating